gkssroot

Registered
Feb 18, 2011
1
0
51
Hi,

our cpanel sever crashes for no clear reason. at midnight load becomes high (8.00) then instant stuck. server on VMware ESXi environment. however monitored that crond had 24 instances which seems not normal. other than that no traces. pl see the images

crond.jpghtop.jpgcpu.JPGmemory.JPGnetwork.JPG

/var/log/messages

Code:
Apr 13 22:33:24 phoenix named[8875]: client 203.94.75.226#56495: view external: update 'lankasathosa.org/IN' denied
Apr 13 22:33:37 phoenix pure-ftpd: ([email protected]) [INFO] New connection from 127.0.0.1
Apr 13 22:33:38 phoenix pure-ftpd: ([email protected]) [INFO] __cpanel__service__auth__ftpd__sA2VtsrcVFF7r5ESy67IIOTVlNxaMhjU0vmQvhDXxqTfrWyeMzxfqrDJeAexVBL4 is now logged in
Apr 13 22:33:38 phoenix pure-ftpd: (__cpanel__service__auth__ftpd__sA2VtsrcVFF7r5ESy67IIOTVlNxaMhjU0vmQvhDXxqTfrWyeMzxfqrDJeAexVBL4@127.0.0.1) [INFO] Logout.
Apr 13 22:33:58 phoenix named[8875]: client 203.94.75.226#61064: view external: update 'lankasathosa.org/IN' denied
Apr 13 22:34:57 phoenix named[8875]: client 203.94.75.226#49980: view external: update 'lankasathosa.org/IN' denied
Apr 13 22:36:21 phoenix named[8875]: client 203.94.75.226#53108: view external: update 'lankasathosa.org/IN' denied
Apr 13 22:37:52 phoenix named[8875]: client 203.94.75.226#53442: view external: update 'lankasathosa.org/IN' denied
Apr 13 22:38:39 phoenix pure-ftpd: ([email protected]) [INFO] New connection from 127.0.0.1
Apr 13 22:38:39 phoenix pure-ftpd: ([email protected]) [INFO] __cpanel__service__auth__ftpd__jDae28lIb5J_RGUl5M8cTkCRlIfVhP7StnmTK9gumm4iQVEkIva2QbP28JDW5D5r is now logged in
Apr 13 22:38:40 phoenix pure-ftpd: (__cpanel__service__auth__ftpd__jDae28lIb5J_RGUl5M8cTkCRlIfVhP7StnmTK9gumm4iQVEkIva2QbP28JDW5D5r@127.0.0.1) [INFO] Logout.
Apr 13 22:39:05 phoenix named[8875]: client 203.94.75.226#51180: view external: update 'lankasathosa.org/IN' denied
Apr 13 22:40:26 phoenix named[8875]: client 203.94.75.226#62807: view external: update 'lankasathosa.org/IN' denied
Apr 13 23:26:12 phoenix syslogd 1.4.1: restart.
Apr 13 23:26:12 phoenix kernel: klogd 1.4.1, log source = /proc/kmsg started.
Apr 13 23:26:12 phoenix kernel: Linux version 2.6.18-448.3.1.el5.lve0.8.64 ([email protected]) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-54)) #1 SMP Mon Apr 8 12:06:12 EEST 2013
Apr 13 23:26:12 phoenix kernel: Command line: ro root=LABEL=/ selinux=0
Apr 13 23:26:12 phoenix kernel: BIOS-provided physical RAM map:
Apr 13 23:26:12 phoenix kernel:  BIOS-e820: 0000000000010000 - 000000000009f800 (usable)
Apr 13 23:26:12 phoenix kernel:  BIOS-e820: 000000000009f800 - 00000000000a0000 (reserved)
Apr 13 23:26:12 phoenix kernel:  BIOS-e820: 00000000000ca000 - 00000000000cc000 (reserved)
Apr 13 23:26:12 phoenix kernel:  BIOS-e820: 00000000000dc000 - 0000000000100000 (reserved)
Apr 13 23:26:12 phoenix kernel:  BIOS-e820: 0000000000100000 - 00000000bfee0000 (usable)
Apr 13 23:26:12 phoenix kernel:  BIOS-e820: 00000000bfee0000 - 00000000bfeff000 (ACPI data)
Apr 13 23:26:12 phoenix kernel:  BIOS-e820: 00000000bfeff000 - 00000000bff00000 (ACPI NVS)
Apr 13 23:26:12 phoenix kernel:  BIOS-e820: 00000000bff00000 - 00000000c0000000 (usable)
Apr 13 23:26:12 phoenix kernel:  BIOS-e820: 00000000e0000000 - 00000000f0000000 (reserved)
Apr 13 23:26:12 phoenix kernel:  BIOS-e820: 00000000fec00000 - 00000000fec10000 (reserved)
Apr 13 23:26:12 phoenix kernel:  BIOS-e820: 00000000fee00000 - 00000000fee01000 (reserved)
Apr 13 23:26:12 phoenix kernel:  BIOS-e820: 00000000fffe0000 - 0000000100000000 (reserved)
Apr 13 23:26:12 phoenix kernel:  BIOS-e820: 0000000100000000 - 0000000540000000 (usable)
Apr 13 23:26:12 phoenix kernel: DMI present.
Apr 13 23:26:12 phoenix kernel: SRAT: PXM 0 -> APIC 0 -> Node 0
Apr 13 23:26:12 phoenix kernel: SRAT: PXM 0 -> APIC 1 -> Node 0
Apr 13 23:26:12 phoenix kernel: SRAT: PXM 0 -> APIC 2 -> Node 0
Apr 13 23:26:12 phoenix kernel: SRAT: PXM 0 -> APIC 3 -> Node 0
Apr 13 23:26:12 phoenix kernel: SRAT: Node 0 PXM 0 0-a0000
Apr 13 23:26:12 phoenix kernel: SRAT: Node 0 PXM 0 0-c0000000
Apr 13 23:26:12 phoenix kernel: SRAT: Node 0 PXM 0 0-540000000
Apr 13 23:26:12 phoenix kernel: Bootmem setup node 0 0000000000000000-0000000540000000
Apr 13 23:26:12 phoenix kernel: Memory for crash kernel (0x0 to 0x0) notwithin permissible range
Apr 13 23:26:12 phoenix kernel: disabling kdump
Apr 13 23:26:12 phoenix kernel: ACPI: PM-Timer IO Port: 0x1008
Apr 13 23:26:12 phoenix kernel: ACPI: LAPIC (acpi_id[0x00] lapic_id[0x00] enabled)
Apr 13 23:26:12 phoenix kernel: Processor #0 6:13 APIC version 20
Apr 13 23:26:12 phoenix kernel: ACPI: LAPIC (acpi_id[0x01] lapic_id[0x01] enabled)
Apr 13 23:26:12 phoenix kernel: Processor #1 6:13 APIC version 20
Apr 13 23:26:12 phoenix kernel: ACPI: LAPIC (acpi_id[0x02] lapic_id[0x02] enabled)
Apr 13 23:26:12 phoenix kernel: Processor #2 6:13 APIC version 20
Apr 13 23:26:12 phoenix kernel: ACPI: LAPIC (acpi_id[0x03] lapic_id[0x03] enabled)
Apr 13 23:26:12 phoenix kernel: Processor #3 6:13 APIC version 20
Apr 13 23:26:12 phoenix kernel: ACPI: LAPIC_NMI (acpi_id[0x00] high edge lint[0x1])
Apr 13 23:26:12 phoenix kernel: ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1])
Apr 13 23:26:12 phoenix kernel: ACPI: LAPIC_NMI (acpi_id[0x02] high edge lint[0x1])
Apr 13 23:26:12 phoenix kernel: ACPI: LAPIC_NMI (acpi_id[0x03] high edge lint[0x1])
Apr 13 23:26:12 phoenix kernel: ACPI: IOAPIC (id[0x04] address[0xfec00000] gsi_base[0])
Apr 13 23:26:12 phoenix kernel: IOAPIC[0]: apic_id 4, version 17, address 0xfec00000, GSI 0-23
Apr 13 23:26:12 phoenix kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 high edge)
: Apr 13 23:26:12 phoenix kernel: ACPI: HPET id: 0x8086af01 base: 0xfed00000
Apr 13 23:26:12 phoenix kernel: Using ACPI (MADT) for SMP configuration information
Apr 13 23:26:12 phoenix kernel: Nosave address range: 000000000009f000 - 00000000000a0000
Apr 13 23:26:12 phoenix kernel: Nosave address range: 00000000000a0000 - 00000000000ca000
Apr 13 23:26:12 phoenix kernel: Nosave address range: 00000000000ca000 - 00000000000cc000
Apr 13 23:26:12 phoenix kernel: Nosave address range: 00000000000cc000 - 00000000000dc000
Apr 13 23:26:12 phoenix kernel: Nosave address range: 00000000000dc000 - 0000000000100000
Apr 13 23:26:12 phoenix kernel: Nosave address range: 00000000bfee0000 - 00000000bfeff000
Apr 13 23:26:12 phoenix kernel: Nosave address range: 00000000bfeff000 - 00000000bff00000
Apr 13 23:26:12 phoenix kernel: Nosave address range: 00000000c0000000 - 00000000e0000000
Apr 13 23:26:12 phoenix kernel: Nosave address range: 00000000e0000000 - 00000000f0000000
Apr 13 23:26:12 phoenix kernel: Nosave address range: 00000000f0000000 - 00000000fec00000
Apr 13 23:26:12 phoenix kernel: Nosave address range: 00000000fec00000 - 00000000fec10000
Apr 13 23:26:12 phoenix kernel: Nosave address range: 00000000fec10000 - 00000000fee00000
Apr 13 23:26:12 phoenix kernel: Nosave address range: 00000000fee00000 - 00000000fee01000
Apr 13 23:26:12 phoenix kernel: Nosave address range: 00000000fee01000 - 00000000fffe0000
Apr 13 23:26:12 phoenix kernel: Nosave address range: 00000000fffe0000 - 0000000100000000
Apr 13 23:26:12 phoenix kernel: Allocating PCI resources starting at c2000000 (gap: c0000000:20000000)
Apr 13 23:26:12 phoenix kernel: Built 1 zonelists.  Total pages: 5155241
Apr 13 23:26:12 phoenix kernel: Kernel command line: ro root=LABEL=/ selinux=0
Apr 13 23:26:12 phoenix kernel: Initializing CPU#0
Apr 13 23:26:12 phoenix kernel: PID hash table entries: 4096 (order: 12, 32768 bytes)
Apr 13 23:26:12 phoenix kernel: Using TSC for driving interrupts
Apr 13 23:26:12 phoenix kernel: Console: colour VGA+ 80x25
Apr 13 23:26:12 phoenix kernel: Dentry cache hash table entries: 4194304 (order: 13, 33554432 bytes)
Apr 13 23:26:12 phoenix kernel: Inode-cache hash table entries: 2097152 (order: 12, 16777216 bytes)
Apr 13 23:26:12 phoenix kernel: Checking aperture...
Apr 13 23:26:12 phoenix kernel: ACPI: DMAR not present
Apr 13 23:26:12 phoenix kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB)
Apr 13 23:26:12 phoenix kernel: Placing software IO TLB between 0x4041000 - 0x8041000
Apr 13 23:26:12 phoenix kernel: Memory: 20502588k/22020096k available (2647k kernel code, 468352k reserved, 1417k data, 244k init)
Apr 13 23:26:12 phoenix kernel: Calibrating delay loop (skipped) preset value.. 3990.38 BogoMIPS (lpj=1995192)
Apr 13 23:26:12 phoenix kernel: Mount-cache hash table entries: 16384
Apr 13 23:26:12 phoenix kernel: CPU: L1 I cache: 32K, L1 D cache: 32K
Apr 13 23:26:12 phoenix kernel: CPU: L2 cache: 256K
Apr 13 23:26:12 phoenix kernel: CPU: L3 cache: 20480K
Apr 13 23:26:12 phoenix kernel: CPU 0/0 -> Node 0
Apr 13 23:26:12 phoenix kernel: MCE: Machine Check Exception Reporting is disabled.
Apr 13 23:26:12 phoenix kernel: Freeing SMP alternatives: 32k freed
Apr 13 23:26:12 phoenix kernel: ACPI: Core revision 20060707
Apr 13 23:26:12 phoenix kernel: Page beancounter hash is 2097152 entries.
Apr 13 23:26:12 phoenix kernel: Page locks hash is 524288 entries.
Apr 13 23:26:12 phoenix kernel: Cannot setup NMI watchdog on CPU 0
Apr 13 23:26:12 phoenix kernel: Using local APIC timer interrupts.
Apr 13 23:26:12 phoenix kernel: Detected 4.124 MHz APIC timer.
Apr 13 23:26:12 phoenix kernel: Booting processor 1/4 APIC 0x1
Apr 13 23:26:12 phoenix kernel: Initializing CPU#1
Apr 13 23:26:12 phoenix kernel: Cannot setup NMI watchdog on CPU 1
Apr 13 23:26:12 phoenix kernel: Calibrating delay loop (skipped) preset value.. 3990.38 BogoMIPS (lpj=1995192)
Apr 13 23:26:12 phoenix kernel: CPU: L1 I cache: 32K, L1 D cache: 32K
Apr 13 23:26:12 phoenix kernel: CPU: L2 cache: 256K
Apr 13 23:26:12 phoenix kernel: CPU: L3 cache: 20480K
Apr 13 23:26:12 phoenix kernel: CPU 1/1 -> Node 0
Apr 13 23:26:12 phoenix kernel:        Intel(R) Xeon(R) CPU E5-2650 0 @ 2.00GHz stepping 07
Apr 13 23:26:12 phoenix kernel: Booting processor 2/4 APIC 0x2
Apr 13 23:26:12 phoenix kernel: Initializing CPU#2
Apr 13 23:26:12 phoenix kernel: Cannot setup NMI watchdog on CPU 2
Apr 13 23:26:12 phoenix kernel: Calibrating delay loop (skipped) preset value.. 3990.38 BogoMIPS (lpj=1995192)
Apr 13 23:26:12 phoenix kernel: CPU: L1 I cache: 32K, L1 D cache: 32K
Apr 13 23:26:12 phoenix kernel: CPU: L2 cache: 256K
Apr 13 23:26:12 phoenix kernel: CPU: L3 cache: 20480K
Apr 13 23:26:12 phoenix kernel:        Intel(R) Xeon(R) CPU E5-2650 0 @ 2.00GHz stepping 07
Apr 13 23:26:12 phoenix kernel: Booting processor 3/4 APIC 0x3
Apr 13 23:26:12 phoenix kernel: Initializing CPU#3
Apr 13 23:26:12 phoenix kernel: Cannot setup NMI watchdog on CPU 3
Apr 13 23:26:12 phoenix kernel: Calibrating delay loop (skipped) preset value.. 3990.38 BogoMIPS (lpj=1995192)
Apr 13 23:26:12 phoenix kernel: CPU: L1 I cache: 32K, L1 D cache: 32K
Apr 13 23:26:12 phoenix kernel: CPU: L2 cache: 256K
Apr 13 23:26:12 phoenix kernel: CPU: L3 cache: 20480K
Apr 13 23:26:12 phoenix kernel: CPU 3/3 -> Node 0
Apr 13 23:26:12 phoenix kernel:        Intel(R) Xeon(R) CPU E5-2650 0 @ 2.00GHz stepping 07
Apr 13 23:26:12 phoenix kernel: Brought up 4 CPUs
Apr 13 23:26:12 phoenix kernel: time.c: Using 14.318180 MHz WALL HPET GTOD TSC Timekeeping timer.
Apr 13 23:26:12 phoenix kernel: time.c: Detected 1995.192 MHz processor.
Apr 13 23:26:12 phoenix kernel: migration_cost=39
Apr 13 23:26:12 phoenix kernel: checking if image is initramfs... it is
Apr 13 23:26:12 phoenix kernel: Freeing initrd memory: 2705k freed
Apr 13 23:26:12 phoenix kernel: NET: Registered protocol family 16
Apr 13 23:26:12 phoenix kernel: ACPI: bus type pci registered
Apr 13 23:26:12 phoenix kernel: PCI: Using MMCONFIG at e0000000
Apr 13 23:26:12 phoenix kernel: ACPI: Interpreter enabled
Apr 13 23:26:12 phoenix kernel: ACPI: Using IOAPIC for interrupt routing
Apr 13 23:26:12 phoenix kernel: ACPI: No dock devices found.
Apr 13 23:26:12 phoenix kernel: ACPI: PCI Root Bridge [PCI0] (0000:00)
Apr 13 23:26:12 phoenix kernel: PCI quirk: region 1000-103f claimed by PIIX4 ACPI
Apr 13 23:26:12 phoenix kernel: PCI quirk: region 1040-104f claimed by PIIX4 SMB
Apr 13 23:26:12 phoenix kernel: pci 0000:00:01.0: PCI bridge to [bus 01-01]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:11.0: PCI bridge to [bus 02-02] (subtractive decode)
Apr 13 23:26:12 phoenix kernel: pci 0000:00:15.0: PCI bridge to [bus 03-03]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:15.1: PCI bridge to [bus 04-04]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:15.2: PCI bridge to [bus 05-05]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:15.3: PCI bridge to [bus 06-06]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:15.4: PCI bridge to [bus 07-07]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:15.5: PCI bridge to [bus 08-08]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:15.6: PCI bridge to [bus 09-09]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:15.7: PCI bridge to [bus 0a-0a]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:16.0: PCI bridge to [bus 0b-0b]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:16.1: PCI bridge to [bus 0c-0c]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:16.2: PCI bridge to [bus 0d-0d]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:16.3: PCI bridge to [bus 0e-0e]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:16.4: PCI bridge to [bus 0f-0f]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:16.5: PCI bridge to [bus 10-10]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:16.6: PCI bridge to [bus 11-11]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:16.7: PCI bridge to [bus 12-12]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:17.0: PCI bridge to [bus 13-13]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:17.1: PCI bridge to [bus 14-14]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:17.2: PCI bridge to [bus 15-15]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:17.3: PCI bridge to [bus 16-16]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:17.4: PCI bridge to [bus 17-17]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:17.5: PCI bridge to [bus 18-18]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:17.6: PCI bridge to [bus 19-19]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:17.7: PCI bridge to [bus 1a-1a]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:18.0: PCI bridge to [bus 1b-1b]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:18.1: PCI bridge to [bus 1c-1c]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:18.2: PCI bridge to [bus 1d-1d]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:18.3: PCI bridge to [bus 1e-1e]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:18.4: PCI bridge to [bus 1f-1f]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:18.5: PCI bridge to [bus 20-20]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:18.6: PCI bridge to [bus 21-21]
Apr 13 23:26:12 phoenix kernel: pci 0000:00:18.7: PCI bridge to [bus 22-22]
Apr 13 23:26:12 phoenix kernel: ACPI: PCI Interrupt Link [LNKA] (IRQs 3 4 5 6 7 *9 10 11 14 15)
Apr 13 23:26:12 phoenix kernel: ACPI: PCI Interrupt Link [LNKB] (IRQs 3 4 5 6 7 9 10 *11 14 15)